Re: QSYSOPR user profile and GO SAVE 21

Sean, I think you hit it - there is an SST user profile that is different from the system user profile - both have a QSYSOPR. The OP mentioned connecting to the console - that one could be disabled. They have to go into SST under a sufficiently-authorized profile and enable QSYSOPR there.

This is probably going to have to be QSECOFR, unless someone there has a full-power profile under their own name.

If this is what is going on, this is just another example of the strong need for individual SST user profiles - it is too easy to disable the system-supplied ones. And with individual users, it is easier to audit who did what when to whom.

JMHO
Vern

On 6/13/2012 8:54 AM, Porterfield, Sean wrote:

If you don't know what it is... how about I5CONSOLE? We called our machine an i5 for quite a while, so that's a reasonable console name. Perhaps it's about the SST user QSYSOPR which is probably needed before the IBM i user QSYSOPR?

I'll leave the other question for someone else, but our QSYSOPR *USRPRF also shows an old save date from when we restored to a new system.
--
Sean Porterfield


-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of John McKee
Sent: Wednesday, June 13, 2012 09:23
To: Midrange Systems Technical Discussion
Subject: QSYSOPR user profile and GO SAVE 21

Some time back, a switch was made to use Go SAVE 21 on the v5r4 system. This morning, I received an email about an issue with QSYSOPR.

Profile is marked as enabled, yet message displayed when operator tries to connect to ISCONSOLE is "The user id QSYSOPR is disabled".

DSPOBJD shows object QSYSOPR *USRPRF was changed this morning at 04:05:52.. But, Save/Restore shows last save date/time of 8/13/06 00:25:31.

Guess I have two questions:

1) I thought a SAVE 21 saved everything. Does that function not update the saved date/time for the user profile?

2) What is ISCONSOLE? I don't see anything by that name.

v5r4 way behind on PTFs.

John McKee
--


This email is confidential, intended only for the named recipient(s) above and may contain information that is privileged. If you have received this message in error or are not the named recipient(s), please notify the sender immediately and delete this email message from your computer as any and all unauthorized distribution or use of this message is strictly prohibited. Thank you.